cdk-rds-sql 8.1.6__tar.gz → 9.0.0__tar.gz

{cdk_rds_sql-8.1.6 → cdk_rds_sql-9.0.0}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.1
 Name: cdk-rds-sql
-Version: 8.1.6
+Version: 9.0.0
 Summary: A CDK construct that allows creating roles or users and databases on Aurora Serverless PostgreSQL or MySQL/MariaDB clusters, as well as AWS DSQL clusters.
 Home-page: https://github.com/berenddeboer/cdk-rds-sql.git
 Author: Berend de Boer<berend@pobox.com>
@@ -10,20 +10,21 @@ Classifier: Intended Audience :: Developers
 Classifier: Operating System :: OS Independent
 Classifier: Programming Language :: JavaScript
 Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.9
 Classifier: Programming Language :: Python :: 3.10
 Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
 Classifier: Typing :: Typed
 Classifier: Development Status :: 5 - Production/Stable
 Classifier: License :: OSI Approved
-Requires-Python: ~=3.9
+Requires-Python: >=3.10
 Description-Content-Type: text/markdown
 License-File: LICENSE
-Requires-Dist: aws-cdk-lib<3.0.0,>=2.214.0
-Requires-Dist: constructs<11.0.0,>=10.4.2
-Requires-Dist: jsii<2.0.0,>=1.129.0
+Requires-Dist: aws-cdk-lib<3.0.0,>=2.273.0
+Requires-Dist: constructs<11.0.0,>=10.5.0
+Requires-Dist: jsii<2.0.0,>=1.141.0
 Requires-Dist: publication>=0.0.3
-Requires-Dist: typeguard==2.13.3
 
 # About
 
@@ -43,6 +44,8 @@ environments, and works in isolated subnets.
 # Requirements
 
 * CDK v2.
+* Node.js 22.14 or newer for consumers, as declared in `package.json`'s `engines`.
+  This is the library's supported minimum, independent of its development tools.
 
 # Installation
 
@@ -172,6 +175,31 @@ has been created.
 If you want to make the role the owner of a new database, just specify
 the `databaseName` here, and create the database later.
 
+### Connection limit (MySQL/MariaDB)
+
+Cap how many connections a MySQL or MariaDB user may open:
+
+```python
+const role = new Role(this, "Role", {
+  provider: provider,
+  roleName: "myrole",
+  databaseName: "mydb",
+  maxUserConnections: 5,
+})
+```
+
+Create and update then run:
+
+```sql
+ALTER USER 'myrole'@'%' WITH MAX_USER_CONNECTIONS 5
+```
+
+Omit `maxUserConnections` to leave the user unlimited, which is the
+existing behaviour. Omitting it does not clear a limit that was already
+applied; set `0` to restore the server default (unlimited unless the
+global `max_user_connections` is set). PostgreSQL and DSQL throw if
+this property is set.
+
 ### IAM Authentication
 
 Instead of password-based authentication, you can create roles that
@@ -546,17 +574,35 @@ const provider = new Provider(this, "Provider", {
 
 # Working on this code
 
-This code is managed by
-[projen](https://github.com/projen/projen/blob/main/README.md). In
-addition [pre-commit](https://pre-commit.com/) is used.
+This code is managed by [projen](https://github.com/projen/projen).
+[mise](https://mise.jdx.dev/) installs Node 24, pnpm 12, and
+[hk](https://hk.jdx.dev/) for Git hooks. Biome handles formatting and linting.
 
-So after git clone and `pnpm install` you would do:
+Development and CI use Node 24. Testcontainers is a development-only dependency;
+its dependency tree requires newer APIs than the consumer minimum of Node 22.14.
 
+After cloning:
+
+```sh
+mise trust
+mise install
+mise run setup
 ```
-pre-commit install --install-hooks --hook-type commit-msg --hook-type pre-commit
-```
 
-to install the pre-commit hooks.
+When migrating an existing clone, replace the old pre-commit hooks with
+`mise exec -- hk install --mise --force`.
+
+Run all checks with `mise run check`, or format and lint with
+`pnpm exec projen biome`. Tests require Docker. TypeScript stays on the
+6.0 release line supported by jsii 6.0.
+
+The pre-commit hook runs the full build, tests, and packaging, so Docker must
+be running. When `VPC_ID` is set, changes under `src/` also run CDK synthesis
+against that VPC; this requires AWS credentials. Unset `VPC_ID` to skip synthesis.
+
+The development tsconfig uses `node16` module resolution, including package
+exports. Jest tasks enable Node's VM module support for native dynamic imports
+such as the MySQL driver import.
 
 ## Testing
 
@@ -566,6 +612,9 @@ Test code via projen with:
 pnpm exec projen test
 ```
 
+Tests do not update snapshots automatically. To intentionally refresh them, run
+`pnpm exec projen test:update` and review the snapshot diff.
+
 You can run the PostgreSQL sample stack with:
 
 ```

cdk_rds_sql-8.1.6/src/cdk_rds_sql.egg-info/PKG-INFO → cdk_rds_sql-9.0.0/README.md

@@ -1,30 +1,3 @@
-Metadata-Version: 2.1
-Name: cdk-rds-sql
-Version: 8.1.6
-Summary: A CDK construct that allows creating roles or users and databases on Aurora Serverless PostgreSQL or MySQL/MariaDB clusters, as well as AWS DSQL clusters.
-Home-page: https://github.com/berenddeboer/cdk-rds-sql.git
-Author: Berend de Boer<berend@pobox.com>
-License: Apache-2.0
-Project-URL: Source, https://github.com/berenddeboer/cdk-rds-sql.git
-Classifier: Intended Audience :: Developers
-Classifier: Operating System :: OS Independent
-Classifier: Programming Language :: JavaScript
-Classifier: Programming Language :: Python :: 3 :: Only
-Classifier: Programming Language :: Python :: 3.9
-Classifier: Programming Language :: Python :: 3.10
-Classifier: Programming Language :: Python :: 3.11
-Classifier: Typing :: Typed
-Classifier: Development Status :: 5 - Production/Stable
-Classifier: License :: OSI Approved
-Requires-Python: ~=3.9
-Description-Content-Type: text/markdown
-License-File: LICENSE
-Requires-Dist: aws-cdk-lib<3.0.0,>=2.214.0
-Requires-Dist: constructs<11.0.0,>=10.4.2
-Requires-Dist: jsii<2.0.0,>=1.129.0
-Requires-Dist: publication>=0.0.3
-Requires-Dist: typeguard==2.13.3
-
 # About
 
 This CDK construct library makes it possible to create databases,
@@ -43,6 +16,8 @@ environments, and works in isolated subnets.
 # Requirements
 
 * CDK v2.
+* Node.js 22.14 or newer for consumers, as declared in `package.json`'s `engines`.
+  This is the library's supported minimum, independent of its development tools.
 
 # Installation
 
@@ -172,6 +147,31 @@ has been created.
 If you want to make the role the owner of a new database, just specify
 the `databaseName` here, and create the database later.
 
+### Connection limit (MySQL/MariaDB)
+
+Cap how many connections a MySQL or MariaDB user may open:
+
+```python
+const role = new Role(this, "Role", {
+  provider: provider,
+  roleName: "myrole",
+  databaseName: "mydb",
+  maxUserConnections: 5,
+})
+```
+
+Create and update then run:
+
+```sql
+ALTER USER 'myrole'@'%' WITH MAX_USER_CONNECTIONS 5
+```
+
+Omit `maxUserConnections` to leave the user unlimited, which is the
+existing behaviour. Omitting it does not clear a limit that was already
+applied; set `0` to restore the server default (unlimited unless the
+global `max_user_connections` is set). PostgreSQL and DSQL throw if
+this property is set.
+
 ### IAM Authentication
 
 Instead of password-based authentication, you can create roles that
@@ -546,17 +546,35 @@ const provider = new Provider(this, "Provider", {
 
 # Working on this code
 
-This code is managed by
-[projen](https://github.com/projen/projen/blob/main/README.md). In
-addition [pre-commit](https://pre-commit.com/) is used.
+This code is managed by [projen](https://github.com/projen/projen).
+[mise](https://mise.jdx.dev/) installs Node 24, pnpm 12, and
+[hk](https://hk.jdx.dev/) for Git hooks. Biome handles formatting and linting.
 
-So after git clone and `pnpm install` you would do:
+Development and CI use Node 24. Testcontainers is a development-only dependency;
+its dependency tree requires newer APIs than the consumer minimum of Node 22.14.
 
+After cloning:
+
+```sh
+mise trust
+mise install
+mise run setup
 ```
-pre-commit install --install-hooks --hook-type commit-msg --hook-type pre-commit
-```
 
-to install the pre-commit hooks.
+When migrating an existing clone, replace the old pre-commit hooks with
+`mise exec -- hk install --mise --force`.
+
+Run all checks with `mise run check`, or format and lint with
+`pnpm exec projen biome`. Tests require Docker. TypeScript stays on the
+6.0 release line supported by jsii 6.0.
+
+The pre-commit hook runs the full build, tests, and packaging, so Docker must
+be running. When `VPC_ID` is set, changes under `src/` also run CDK synthesis
+against that VPC; this requires AWS credentials. Unset `VPC_ID` to skip synthesis.
+
+The development tsconfig uses `node16` module resolution, including package
+exports. Jest tasks enable Node's VM module support for native dynamic imports
+such as the MySQL driver import.
 
 ## Testing
 
@@ -566,6 +584,9 @@ Test code via projen with:
 pnpm exec projen test
 ```
 
+Tests do not update snapshots automatically. To intentionally refresh them, run
+`pnpm exec projen test:update` and review the snapshot diff.
+
 You can run the PostgreSQL sample stack with:
 
 ```

{cdk_rds_sql-8.1.6 → cdk_rds_sql-9.0.0}/pyproject.toml

@@ -1,9 +1,9 @@
 [build-system]
-requires = ["setuptools~=75.3.2", "build~=1.3.0"]
+requires = ["setuptools~=75.3.2", "build~=1.6.1"]
 build-backend = "setuptools.build_meta"
 
 [tool.pyright]
 defineConstant = { DEBUG = true }
-pythonVersion = "3.9"
+pythonVersion = "3.10"
 pythonPlatform = "All"
 reportSelfClsParameterName = false

{cdk_rds_sql-8.1.6 → cdk_rds_sql-9.0.0}/setup.py

@@ -5,7 +5,7 @@ kwargs = json.loads(
     """
 {
     "name": "cdk-rds-sql",
-    "version": "8.1.6",
+    "version": "9.0.0",
     "description": "A CDK construct that allows creating roles or users and databases on Aurora Serverless PostgreSQL or MySQL/MariaDB clusters, as well as AWS DSQL clusters.",
     "license": "Apache-2.0",
     "url": "https://github.com/berenddeboer/cdk-rds-sql.git",
@@ -26,28 +26,29 @@ kwargs = json.loads(
     ],
     "package_data": {
         "cdk_rds_sql._jsii": [
-            "cdk-rds-sql@8.1.6.jsii.tgz"
+            "cdk-rds-sql@9.0.0.jsii.tgz"
         ],
         "cdk_rds_sql": [
             "py.typed"
         ]
     },
-    "python_requires": "~=3.9",
+    "python_requires": ">=3.10",
     "install_requires": [
-        "aws-cdk-lib>=2.214.0, <3.0.0",
-        "constructs>=10.4.2, <11.0.0",
-        "jsii>=1.129.0, <2.0.0",
-        "publication>=0.0.3",
-        "typeguard==2.13.3"
+        "aws-cdk-lib>=2.273.0, <3.0.0",
+        "constructs>=10.5.0, <11.0.0",
+        "jsii>=1.141.0, <2.0.0",
+        "publication>=0.0.3"
     ],
     "classifiers": [
         "Intended Audience :: Developers",
         "Operating System :: OS Independent",
         "Programming Language :: JavaScript",
         "Programming Language :: Python :: 3 :: Only",
-        "Programming Language :: Python :: 3.9",
         "Programming Language :: Python :: 3.10",
         "Programming Language :: Python :: 3.11",
+        "Programming Language :: Python :: 3.12",
+        "Programming Language :: Python :: 3.13",
+        "Programming Language :: Python :: 3.14",
         "Typing :: Typed",
         "Development Status :: 5 - Production/Stable",
         "License :: OSI Approved"

{cdk_rds_sql-8.1.6 → cdk_rds_sql-9.0.0}/src/cdk_rds_sql/__init__.py

@@ -17,6 +17,8 @@ environments, and works in isolated subnets.
 # Requirements
 
 * CDK v2.
+* Node.js 22.14 or newer for consumers, as declared in `package.json`'s `engines`.
+  This is the library's supported minimum, independent of its development tools.
 
 # Installation
 
@@ -146,6 +148,31 @@ has been created.
 If you want to make the role the owner of a new database, just specify
 the `databaseName` here, and create the database later.
 
+### Connection limit (MySQL/MariaDB)
+
+Cap how many connections a MySQL or MariaDB user may open:
+
+```python
+const role = new Role(this, "Role", {
+  provider: provider,
+  roleName: "myrole",
+  databaseName: "mydb",
+  maxUserConnections: 5,
+})
+```
+
+Create and update then run:
+
+```sql
+ALTER USER 'myrole'@'%' WITH MAX_USER_CONNECTIONS 5
+```
+
+Omit `maxUserConnections` to leave the user unlimited, which is the
+existing behaviour. Omitting it does not clear a limit that was already
+applied; set `0` to restore the server default (unlimited unless the
+global `max_user_connections` is set). PostgreSQL and DSQL throw if
+this property is set.
+
 ### IAM Authentication
 
 Instead of password-based authentication, you can create roles that
@@ -520,17 +547,35 @@ const provider = new Provider(this, "Provider", {
 
 # Working on this code
 
-This code is managed by
-[projen](https://github.com/projen/projen/blob/main/README.md). In
-addition [pre-commit](https://pre-commit.com/) is used.
+This code is managed by [projen](https://github.com/projen/projen).
+[mise](https://mise.jdx.dev/) installs Node 24, pnpm 12, and
+[hk](https://hk.jdx.dev/) for Git hooks. Biome handles formatting and linting.
 
-So after git clone and `pnpm install` you would do:
+Development and CI use Node 24. Testcontainers is a development-only dependency;
+its dependency tree requires newer APIs than the consumer minimum of Node 22.14.
 
+After cloning:
+
+```sh
+mise trust
+mise install
+mise run setup
 ```
-pre-commit install --install-hooks --hook-type commit-msg --hook-type pre-commit
-```
 
-to install the pre-commit hooks.
+When migrating an existing clone, replace the old pre-commit hooks with
+`mise exec -- hk install --mise --force`.
+
+Run all checks with `mise run check`, or format and lint with
+`pnpm exec projen biome`. Tests require Docker. TypeScript stays on the
+6.0 release line supported by jsii 6.0.
+
+The pre-commit hook runs the full build, tests, and packaging, so Docker must
+be running. When `VPC_ID` is set, changes under `src/` also run CDK synthesis
+against that VPC; this requires AWS credentials. Unset `VPC_ID` to skip synthesis.
+
+The development tsconfig uses `node16` module resolution, including package
+exports. Jest tasks enable Node's VM module support for native dynamic imports
+such as the MySQL driver import.
 
 ## Testing
 
@@ -540,6 +585,9 @@ Test code via projen with:
 pnpm exec projen test
 ```
 
+Tests do not update snapshots automatically. To intentionally refresh them, run
+`pnpm exec projen test:update` and review the snapshot diff.
+
 You can run the PostgreSQL sample stack with:
 
 ```
@@ -562,6 +610,8 @@ pnpm exec projen integ:deploy:dsql
 
 * Update role: will not revoke connect to previous database if database name has changed.
 '''
+from __future__ import annotations
+
 from pkgutil import extend_path
 __path__ = extend_path(__path__, __name__)
 
@@ -575,33 +625,41 @@ import jsii
 import publication
 import typing_extensions
 
-import typeguard
-from importlib.metadata import version as _metadata_package_version
-TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
-
-def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
-    if TYPEGUARD_MAJOR_VERSION <= 2:
-        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
-    else:
-        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
-           pass
-        else:
-            if TYPEGUARD_MAJOR_VERSION == 3:
-                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
-                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
-            else:
-                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
+from jsii._type_checking import cached_type_hints, check_type
+
 
 from ._jsii import *
 
-import aws_cdk as _aws_cdk_ceddda9d
-import aws_cdk.aws_dsql as _aws_cdk_aws_dsql_ceddda9d
-import aws_cdk.aws_ec2 as _aws_cdk_aws_ec2_ceddda9d
-import aws_cdk.aws_kms as _aws_cdk_aws_kms_ceddda9d
-import aws_cdk.aws_lambda as _aws_cdk_aws_lambda_ceddda9d
-import aws_cdk.aws_rds as _aws_cdk_aws_rds_ceddda9d
-import aws_cdk.aws_secretsmanager as _aws_cdk_aws_secretsmanager_ceddda9d
-import constructs as _constructs_77d1e7e8
+class _LazyImport:
+    def __init__(self, module_name: str) -> None:
+        self._module_name = module_name
+        self._module: typing.Any = None
+    def __getattr__(self, name: str) -> typing.Any:
+        if self._module is None:
+            import importlib
+            self._module = importlib.import_module(self._module_name)
+        return getattr(self._module, name)
+
+if typing.TYPE_CHECKING:
+
+    import aws_cdk as _aws_cdk_ceddda9d
+    import aws_cdk.aws_dsql as _aws_cdk_aws_dsql_ceddda9d
+    import aws_cdk.aws_ec2 as _aws_cdk_aws_ec2_ceddda9d
+    import aws_cdk.aws_kms as _aws_cdk_aws_kms_ceddda9d
+    import aws_cdk.aws_lambda as _aws_cdk_aws_lambda_ceddda9d
+    import aws_cdk.aws_rds as _aws_cdk_aws_rds_ceddda9d
+    import aws_cdk.aws_secretsmanager as _aws_cdk_aws_secretsmanager_ceddda9d
+    import constructs as _constructs_77d1e7e8
+else:
+
+    _aws_cdk_aws_dsql_ceddda9d = _LazyImport("aws_cdk.aws_dsql")
+    _aws_cdk_aws_ec2_ceddda9d = _LazyImport("aws_cdk.aws_ec2")
+    _aws_cdk_aws_kms_ceddda9d = _LazyImport("aws_cdk.aws_kms")
+    _aws_cdk_aws_lambda_ceddda9d = _LazyImport("aws_cdk.aws_lambda")
+    _aws_cdk_aws_rds_ceddda9d = _LazyImport("aws_cdk.aws_rds")
+    _aws_cdk_aws_secretsmanager_ceddda9d = _LazyImport("aws_cdk.aws_secretsmanager")
+    _aws_cdk_ceddda9d = _LazyImport("aws_cdk")
+    _constructs_77d1e7e8 = _LazyImport("constructs")
 
 
 @jsii.enum(jsii_type="cdk-rds-sql.DatabaseEngine")
@@ -636,7 +694,7 @@ class DatabaseProps:
         :param owner: Optional database owner.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__d02a87af93e26ceaf647662fc78818b2f43fe154b349df3c4f5752d22b61ea34)
+            type_hints = cached_type_hints(_typecheckingstub__d02a87af93e26ceaf647662fc78818b2f43fe154b349df3c4f5752d22b61ea34)
             check_type(argname="argument database_name", value=database_name, expected_type=type_hints["database_name"])
             check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
             check_type(argname="argument owner", value=owner, expected_type=type_hints["owner"])
@@ -785,7 +843,7 @@ class IamGrant(
         :param role_name: Database role name to grant IAM access to.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__ddc8001ac6195e8fb417d17f2106bdcd50800e6da2afb84794113f44cc6c18c9)
+            type_hints = cached_type_hints(_typecheckingstub__ddc8001ac6195e8fb417d17f2106bdcd50800e6da2afb84794113f44cc6c18c9)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = IamGrantProps(
@@ -818,7 +876,7 @@ class IamGrantProps:
         :param role_name: Database role name to grant IAM access to.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__4887252bb5c41c89521a26b729d32055341e5bee89b4f65947a38d7c0aaf5dec)
+            type_hints = cached_type_hints(_typecheckingstub__4887252bb5c41c89521a26b729d32055341e5bee89b4f65947a38d7c0aaf5dec)
             check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
             check_type(argname="argument resource_arn", value=resource_arn, expected_type=type_hints["resource_arn"])
             check_type(argname="argument role_name", value=role_name, expected_type=type_hints["role_name"])
@@ -894,7 +952,7 @@ class Provider(
         :param vpc_subnets: Where to place the network provider lambda within the VPC. Default: - the isolated subnet if not specified
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__f569409e68b7292df1965d915629ef8c34532a3dcd05bea0032c564041e409e4)
+            type_hints = cached_type_hints(_typecheckingstub__f569409e68b7292df1965d915629ef8c34532a3dcd05bea0032c564041e409e4)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = RdsSqlProps(
@@ -932,7 +990,7 @@ class Provider(
         :param function_name: 
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__6447e54f3866ee95542c4c6e6f57beb9f77e9508347c20f14c7bb52a36c8133c)
+            type_hints = cached_type_hints(_typecheckingstub__6447e54f3866ee95542c4c6e6f57beb9f77e9508347c20f14c7bb52a36c8133c)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         attrs = ProviderAttributes(
@@ -972,7 +1030,7 @@ class Provider(
         :param vpc_subnets: Where to place the network provider lambda within the VPC. Default: - the isolated subnet if not specified
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__16aa0dc03b1ffdc1c49190bb39d545df3907972a07f344528a5a891c23d0f28c)
+            type_hints = cached_type_hints(_typecheckingstub__16aa0dc03b1ffdc1c49190bb39d545df3907972a07f344528a5a891c23d0f28c)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = RdsSqlProps(
@@ -1046,7 +1104,7 @@ class ProviderAttributes:
         :param function_name: 
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__38638fb01c5b5c1e90a480e969bec755370ee72cad8844940b704cff73c8057c)
+            type_hints = cached_type_hints(_typecheckingstub__38638fb01c5b5c1e90a480e969bec755370ee72cad8844940b704cff73c8057c)
             check_type(argname="argument engine", value=engine, expected_type=type_hints["engine"])
             check_type(argname="argument cluster", value=cluster, expected_type=type_hints["cluster"])
             check_type(argname="argument function_arn", value=function_arn, expected_type=type_hints["function_arn"])
@@ -1153,7 +1211,7 @@ class RdsSqlProps:
         if isinstance(vpc_subnets, dict):
             vpc_subnets = _aws_cdk_aws_ec2_ceddda9d.SubnetSelection(**vpc_subnets)
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__1562dfb28e0e71a0b95785ddbc26511738019b8ab5c6885e0ff1f2050e6d045b)
+            type_hints = cached_type_hints(_typecheckingstub__1562dfb28e0e71a0b95785ddbc26511738019b8ab5c6885e0ff1f2050e6d045b)
             check_type(argname="argument cluster", value=cluster, expected_type=type_hints["cluster"])
             check_type(argname="argument function_props", value=function_props, expected_type=type_hints["function_props"])
             check_type(argname="argument logger", value=logger, expected_type=type_hints["logger"])
@@ -1314,6 +1372,7 @@ class Role(
         database_name: typing.Optional[builtins.str] = None,
         enable_iam_auth: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        max_user_connections: typing.Optional[jsii.Number] = None,
         parameter_prefix: typing.Optional[builtins.str] = None,
         secret_name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -1326,11 +1385,12 @@ class Role(
         :param database_name: Optional database name this user is expected to use. If the database exists, connect privileges are granted. Specify one of ``database`` or ``databaseName``. This is the name that will be stored in the role's secret as the database name to use.
         :param enable_iam_auth: Enable IAM authentication for this role. When enabled, the role will be created without a password and configured for AWS IAM database authentication. No secret will be created for this role. Note: For DSQL clusters, this property is ignored as DSQL always uses IAM authentication. Default: false - use password authentication
         :param encryption_key: A new secret is created for this user. Optionally encrypt it with the given key.
+        :param max_user_connections: Maximum simultaneous connections for this MySQL/MariaDB user. When set, create and update run ``ALTER USER '<roleName>'@'%' WITH MAX_USER_CONNECTIONS <n>``. A later change, including a smaller number, is applied on update. ``0`` restores the server default (unlimited unless the global ``max_user_connections`` is set). Omit the property to leave the user unlimited. Omitting it does not clear a limit that was already applied; set ``0`` to do that. PostgreSQL and DSQL do not support this property and throw if it is set. Default: undefined - no connection limit is applied
         :param parameter_prefix: Prefix for SSM parameters to store credentials in Parameter Store. When defined, credentials will also be stored as parameters. The parameter names such as "password" is simply appended to ``parameterPrefix``, so make sure the prefix ends with a slash if you have your parameter names slash separated. The password parameter is refreshed when CloudFormation updates the generated secret resource. Default: - credentials are only stored in Secrets Manager
         :param secret_name: A new secret is created for this user. Optionally add secret name to the secret.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__062afab8717d46f6fc2a31188b28d9e663190b2080174cc7f1ddd691f699de7e)
+            type_hints = cached_type_hints(_typecheckingstub__062afab8717d46f6fc2a31188b28d9e663190b2080174cc7f1ddd691f699de7e)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = RoleProps(
@@ -1340,6 +1400,7 @@ class Role(
             database_name=database_name,
             enable_iam_auth=enable_iam_auth,
             encryption_key=encryption_key,
+            max_user_connections=max_user_connections,
             parameter_prefix=parameter_prefix,
             secret_name=secret_name,
         )
@@ -1378,6 +1439,7 @@ class Role(
         "database_name": "databaseName",
         "enable_iam_auth": "enableIamAuth",
         "encryption_key": "encryptionKey",
+        "max_user_connections": "maxUserConnections",
         "parameter_prefix": "parameterPrefix",
         "secret_name": "secretName",
     },
@@ -1392,6 +1454,7 @@ class RoleProps:
         database_name: typing.Optional[builtins.str] = None,
         enable_iam_auth: typing.Optional[builtins.bool] = None,
         encryption_key: typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"] = None,
+        max_user_connections: typing.Optional[jsii.Number] = None,
         parameter_prefix: typing.Optional[builtins.str] = None,
         secret_name: typing.Optional[builtins.str] = None,
     ) -> None:
@@ -1402,17 +1465,19 @@ class RoleProps:
         :param database_name: Optional database name this user is expected to use. If the database exists, connect privileges are granted. Specify one of ``database`` or ``databaseName``. This is the name that will be stored in the role's secret as the database name to use.
         :param enable_iam_auth: Enable IAM authentication for this role. When enabled, the role will be created without a password and configured for AWS IAM database authentication. No secret will be created for this role. Note: For DSQL clusters, this property is ignored as DSQL always uses IAM authentication. Default: false - use password authentication
         :param encryption_key: A new secret is created for this user. Optionally encrypt it with the given key.
+        :param max_user_connections: Maximum simultaneous connections for this MySQL/MariaDB user. When set, create and update run ``ALTER USER '<roleName>'@'%' WITH MAX_USER_CONNECTIONS <n>``. A later change, including a smaller number, is applied on update. ``0`` restores the server default (unlimited unless the global ``max_user_connections`` is set). Omit the property to leave the user unlimited. Omitting it does not clear a limit that was already applied; set ``0`` to do that. PostgreSQL and DSQL do not support this property and throw if it is set. Default: undefined - no connection limit is applied
         :param parameter_prefix: Prefix for SSM parameters to store credentials in Parameter Store. When defined, credentials will also be stored as parameters. The parameter names such as "password" is simply appended to ``parameterPrefix``, so make sure the prefix ends with a slash if you have your parameter names slash separated. The password parameter is refreshed when CloudFormation updates the generated secret resource. Default: - credentials are only stored in Secrets Manager
         :param secret_name: A new secret is created for this user. Optionally add secret name to the secret.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__a7ed79cdb7903207b3240698f6bcb0582905979c1519e2b49d66fa6fbdac11ee)
+            type_hints = cached_type_hints(_typecheckingstub__a7ed79cdb7903207b3240698f6bcb0582905979c1519e2b49d66fa6fbdac11ee)
             check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
             check_type(argname="argument role_name", value=role_name, expected_type=type_hints["role_name"])
             check_type(argname="argument database", value=database, expected_type=type_hints["database"])
             check_type(argname="argument database_name", value=database_name, expected_type=type_hints["database_name"])
             check_type(argname="argument enable_iam_auth", value=enable_iam_auth, expected_type=type_hints["enable_iam_auth"])
             check_type(argname="argument encryption_key", value=encryption_key, expected_type=type_hints["encryption_key"])
+            check_type(argname="argument max_user_connections", value=max_user_connections, expected_type=type_hints["max_user_connections"])
             check_type(argname="argument parameter_prefix", value=parameter_prefix, expected_type=type_hints["parameter_prefix"])
             check_type(argname="argument secret_name", value=secret_name, expected_type=type_hints["secret_name"])
         self._values: typing.Dict[builtins.str, typing.Any] = {
@@ -1427,6 +1492,8 @@ class RoleProps:
             self._values["enable_iam_auth"] = enable_iam_auth
         if encryption_key is not None:
             self._values["encryption_key"] = encryption_key
+        if max_user_connections is not None:
+            self._values["max_user_connections"] = max_user_connections
         if parameter_prefix is not None:
             self._values["parameter_prefix"] = parameter_prefix
         if secret_name is not None:
@@ -1497,6 +1564,26 @@ class RoleProps:
         result = self._values.get("encryption_key")
         return typing.cast(typing.Optional["_aws_cdk_aws_kms_ceddda9d.IKey"], result)
 
+    @builtins.property
+    def max_user_connections(self) -> typing.Optional[jsii.Number]:
+        '''Maximum simultaneous connections for this MySQL/MariaDB user.
+
+        When set, create and update run
+        ``ALTER USER '<roleName>'@'%' WITH MAX_USER_CONNECTIONS <n>``.
+        A later change, including a smaller number, is applied on update.
+        ``0`` restores the server default (unlimited unless the global
+        ``max_user_connections`` is set).
+
+        Omit the property to leave the user unlimited. Omitting it does not
+        clear a limit that was already applied; set ``0`` to do that.
+
+        PostgreSQL and DSQL do not support this property and throw if it is set.
+
+        :default: undefined - no connection limit is applied
+        '''
+        result = self._values.get("max_user_connections")
+        return typing.cast(typing.Optional[jsii.Number], result)
+
     @builtins.property
     def parameter_prefix(self) -> typing.Optional[builtins.str]:
         '''Prefix for SSM parameters to store credentials in Parameter Store. When defined, credentials will also be stored as parameters.
@@ -1558,7 +1645,7 @@ class Schema(
         :param role: Optional role which will be granted usage and create permissions to this schema. This way the role can read its own tables, but cannot see or access tables created by others.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__23264d20ca42f56453469fb6eae1679bf4f901ace3ccab77b186aa28167779bf)
+            type_hints = cached_type_hints(_typecheckingstub__23264d20ca42f56453469fb6eae1679bf4f901ace3ccab77b186aa28167779bf)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = SchemaProps(
@@ -1599,7 +1686,7 @@ class SchemaProps:
         :param role: Optional role which will be granted usage and create permissions to this schema. This way the role can read its own tables, but cannot see or access tables created by others.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__3e5c9257731fa92bb3b0a3fd8f4556888ed99294fcba1b14ade48e8d8d57c6b0)
+            type_hints = cached_type_hints(_typecheckingstub__3e5c9257731fa92bb3b0a3fd8f4556888ed99294fcba1b14ade48e8d8d57c6b0)
             check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
             check_type(argname="argument schema_name", value=schema_name, expected_type=type_hints["schema_name"])
             check_type(argname="argument database", value=database, expected_type=type_hints["database"])
@@ -1682,7 +1769,7 @@ class Sql(
         :param statement: SQL.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__a34aa094d1e87a65ca4be0fe7c3fad7c2a9f986cfd40a3f07de15d3d6b0d2139)
+            type_hints = cached_type_hints(_typecheckingstub__a34aa094d1e87a65ca4be0fe7c3fad7c2a9f986cfd40a3f07de15d3d6b0d2139)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = SqlProps(
@@ -1721,7 +1808,7 @@ class SqlProps:
         :param statement: SQL.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__fee81de7736c28ed1e24db0db96a0f7084eb4dad448f37b2efdc59960daf7f24)
+            type_hints = cached_type_hints(_typecheckingstub__fee81de7736c28ed1e24db0db96a0f7084eb4dad448f37b2efdc59960daf7f24)
             check_type(argname="argument provider", value=provider, expected_type=type_hints["provider"])
             check_type(argname="argument database", value=database, expected_type=type_hints["database"])
             check_type(argname="argument rollback", value=rollback, expected_type=type_hints["rollback"])
@@ -1799,7 +1886,7 @@ class Database(
         :param owner: Optional database owner.
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__9b0a129482abaf744a12ee5aabac9c0545bc3cdf8edcfb3dca83d0c1051326ed)
+            type_hints = cached_type_hints(_typecheckingstub__9b0a129482abaf744a12ee5aabac9c0545bc3cdf8edcfb3dca83d0c1051326ed)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
         props = DatabaseProps(
@@ -1825,7 +1912,7 @@ class Database(
         :param database_name: -
         '''
         if __debug__:
-            type_hints = typing.get_type_hints(_typecheckingstub__771fb1f62814ed88a15c2f9d4d948498f7416f30cd8e9d630b3ea09667333681)
+            type_hints = cached_type_hints(_typecheckingstub__771fb1f62814ed88a15c2f9d4d948498f7416f30cd8e9d630b3ea09667333681)
             check_type(argname="argument scope", value=scope, expected_type=type_hints["scope"])
             check_type(argname="argument id", value=id, expected_type=type_hints["id"])
             check_type(argname="argument database_name", value=database_name, expected_type=type_hints["database_name"])
@@ -1966,6 +2053,7 @@ def _typecheckingstub__062afab8717d46f6fc2a31188b28d9e663190b2080174cc7f1ddd691f
     database_name: typing.Optional[builtins.str] = None,
     enable_iam_auth: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
+    max_user_connections: typing.Optional[jsii.Number] = None,
     parameter_prefix: typing.Optional[builtins.str] = None,
     secret_name: typing.Optional[builtins.str] = None,
 ) -> None:
@@ -1980,6 +2068,7 @@ def _typecheckingstub__a7ed79cdb7903207b3240698f6bcb0582905979c1519e2b49d66fa6fb
     database_name: typing.Optional[builtins.str] = None,
     enable_iam_auth: typing.Optional[builtins.bool] = None,
     encryption_key: typing.Optional[_aws_cdk_aws_kms_ceddda9d.IKey] = None,
+    max_user_connections: typing.Optional[jsii.Number] = None,
     parameter_prefix: typing.Optional[builtins.str] = None,
     secret_name: typing.Optional[builtins.str] = None,
 ) -> None:

cdk_rds_sql-9.0.0/src/cdk_rds_sql/_jsii/__init__.py

@@ -0,0 +1,28 @@
+from pkgutil import extend_path
+__path__ = extend_path(__path__, __name__)
+
+import abc
+import builtins
+import datetime
+import enum
+import typing
+
+import jsii
+import publication
+import typing_extensions
+
+from jsii._type_checking import cached_type_hints, check_type
+
+
+import aws_cdk._jsii
+import constructs._jsii
+
+__jsii_assembly__ = jsii.JSIIAssembly.load(
+    "cdk-rds-sql", "9.0.0", __name__[0:-6], "cdk-rds-sql@9.0.0.jsii.tgz"
+)
+
+__all__ = [
+    "__jsii_assembly__",
+]
+
+publication.publish()

cdk_rds_sql-8.1.6/README.md → cdk_rds_sql-9.0.0/src/cdk_rds_sql.egg-info/PKG-INFO

@@ -1,3 +1,31 @@
+Metadata-Version: 2.1
+Name: cdk-rds-sql
+Version: 9.0.0
+Summary: A CDK construct that allows creating roles or users and databases on Aurora Serverless PostgreSQL or MySQL/MariaDB clusters, as well as AWS DSQL clusters.
+Home-page: https://github.com/berenddeboer/cdk-rds-sql.git
+Author: Berend de Boer<berend@pobox.com>
+License: Apache-2.0
+Project-URL: Source, https://github.com/berenddeboer/cdk-rds-sql.git
+Classifier: Intended Audience :: Developers
+Classifier: Operating System :: OS Independent
+Classifier: Programming Language :: JavaScript
+Classifier: Programming Language :: Python :: 3 :: Only
+Classifier: Programming Language :: Python :: 3.10
+Classifier: Programming Language :: Python :: 3.11
+Classifier: Programming Language :: Python :: 3.12
+Classifier: Programming Language :: Python :: 3.13
+Classifier: Programming Language :: Python :: 3.14
+Classifier: Typing :: Typed
+Classifier: Development Status :: 5 - Production/Stable
+Classifier: License :: OSI Approved
+Requires-Python: >=3.10
+Description-Content-Type: text/markdown
+License-File: LICENSE
+Requires-Dist: aws-cdk-lib<3.0.0,>=2.273.0
+Requires-Dist: constructs<11.0.0,>=10.5.0
+Requires-Dist: jsii<2.0.0,>=1.141.0
+Requires-Dist: publication>=0.0.3
+
 # About
 
 This CDK construct library makes it possible to create databases,
@@ -16,6 +44,8 @@ environments, and works in isolated subnets.
 # Requirements
 
 * CDK v2.
+* Node.js 22.14 or newer for consumers, as declared in `package.json`'s `engines`.
+  This is the library's supported minimum, independent of its development tools.
 
 # Installation
 
@@ -145,6 +175,31 @@ has been created.
 If you want to make the role the owner of a new database, just specify
 the `databaseName` here, and create the database later.
 
+### Connection limit (MySQL/MariaDB)
+
+Cap how many connections a MySQL or MariaDB user may open:
+
+```python
+const role = new Role(this, "Role", {
+  provider: provider,
+  roleName: "myrole",
+  databaseName: "mydb",
+  maxUserConnections: 5,
+})
+```
+
+Create and update then run:
+
+```sql
+ALTER USER 'myrole'@'%' WITH MAX_USER_CONNECTIONS 5
+```
+
+Omit `maxUserConnections` to leave the user unlimited, which is the
+existing behaviour. Omitting it does not clear a limit that was already
+applied; set `0` to restore the server default (unlimited unless the
+global `max_user_connections` is set). PostgreSQL and DSQL throw if
+this property is set.
+
 ### IAM Authentication
 
 Instead of password-based authentication, you can create roles that
@@ -519,17 +574,35 @@ const provider = new Provider(this, "Provider", {
 
 # Working on this code
 
-This code is managed by
-[projen](https://github.com/projen/projen/blob/main/README.md). In
-addition [pre-commit](https://pre-commit.com/) is used.
+This code is managed by [projen](https://github.com/projen/projen).
+[mise](https://mise.jdx.dev/) installs Node 24, pnpm 12, and
+[hk](https://hk.jdx.dev/) for Git hooks. Biome handles formatting and linting.
 
-So after git clone and `pnpm install` you would do:
+Development and CI use Node 24. Testcontainers is a development-only dependency;
+its dependency tree requires newer APIs than the consumer minimum of Node 22.14.
 
+After cloning:
+
+```sh
+mise trust
+mise install
+mise run setup
 ```
-pre-commit install --install-hooks --hook-type commit-msg --hook-type pre-commit
-```
 
-to install the pre-commit hooks.
+When migrating an existing clone, replace the old pre-commit hooks with
+`mise exec -- hk install --mise --force`.
+
+Run all checks with `mise run check`, or format and lint with
+`pnpm exec projen biome`. Tests require Docker. TypeScript stays on the
+6.0 release line supported by jsii 6.0.
+
+The pre-commit hook runs the full build, tests, and packaging, so Docker must
+be running. When `VPC_ID` is set, changes under `src/` also run CDK synthesis
+against that VPC; this requires AWS credentials. Unset `VPC_ID` to skip synthesis.
+
+The development tsconfig uses `node16` module resolution, including package
+exports. Jest tasks enable Node's VM module support for native dynamic imports
+such as the MySQL driver import.
 
 ## Testing
 
@@ -539,6 +612,9 @@ Test code via projen with:
 pnpm exec projen test
 ```
 
+Tests do not update snapshots automatically. To intentionally refresh them, run
+`pnpm exec projen test:update` and review the snapshot diff.
+
 You can run the PostgreSQL sample stack with:
 
 ```

{cdk_rds_sql-8.1.6 → cdk_rds_sql-9.0.0}/src/cdk_rds_sql.egg-info/SOURCES.txt

@@ -11,4 +11,4 @@ src/cdk_rds_sql.egg-info/dependency_links.txt
 src/cdk_rds_sql.egg-info/requires.txt
 src/cdk_rds_sql.egg-info/top_level.txt
 src/cdk_rds_sql/_jsii/__init__.py
-src/cdk_rds_sql/_jsii/cdk-rds-sql@8.1.6.jsii.tgz
+src/cdk_rds_sql/_jsii/cdk-rds-sql@9.0.0.jsii.tgz

cdk_rds_sql-9.0.0/src/cdk_rds_sql.egg-info/requires.txt

@@ -0,0 +1,4 @@
+aws-cdk-lib<3.0.0,>=2.273.0
+constructs<11.0.0,>=10.5.0
+jsii<2.0.0,>=1.141.0
+publication>=0.0.3

cdk_rds_sql-8.1.6/src/cdk_rds_sql/_jsii/__init__.py

@@ -1,42 +0,0 @@
-from pkgutil import extend_path
-__path__ = extend_path(__path__, __name__)
-
-import abc
-import builtins
-import datetime
-import enum
-import typing
-
-import jsii
-import publication
-import typing_extensions
-
-import typeguard
-from importlib.metadata import version as _metadata_package_version
-TYPEGUARD_MAJOR_VERSION = int(_metadata_package_version('typeguard').split('.')[0])
-
-def check_type(argname: str, value: object, expected_type: typing.Any) -> typing.Any:
-    if TYPEGUARD_MAJOR_VERSION <= 2:
-        return typeguard.check_type(argname=argname, value=value, expected_type=expected_type) # type:ignore
-    else:
-        if isinstance(value, jsii._reference_map.InterfaceDynamicProxy): # pyright: ignore [reportAttributeAccessIssue]
-           pass
-        else:
-            if TYPEGUARD_MAJOR_VERSION == 3:
-                typeguard.config.collection_check_strategy = typeguard.CollectionCheckStrategy.ALL_ITEMS # type:ignore
-                typeguard.check_type(value=value, expected_type=expected_type) # type:ignore
-            else:
-                typeguard.check_type(value=value, expected_type=expected_type, collection_check_strategy=typeguard.CollectionCheckStrategy.ALL_ITEMS) # type:ignore
-
-import aws_cdk._jsii
-import constructs._jsii
-
-__jsii_assembly__ = jsii.JSIIAssembly.load(
-    "cdk-rds-sql", "8.1.6", __name__[0:-6], "cdk-rds-sql@8.1.6.jsii.tgz"
-)
-
-__all__ = [
-    "__jsii_assembly__",
-]
-
-publication.publish()

cdk_rds_sql-8.1.6/src/cdk_rds_sql.egg-info/requires.txt

@@ -1,5 +0,0 @@
-aws-cdk-lib<3.0.0,>=2.214.0
-constructs<11.0.0,>=10.4.2
-jsii<2.0.0,>=1.129.0
-publication>=0.0.3
-typeguard==2.13.3